JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 161.35.3.74

161.35.3.74 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 161.35.3.74

Whois 161.35.3.74

IP Abuse Reports for 161.35.3.74:

This IP address has been reported a total of 21 times from 18 distinct sources. 161.35.3.74 was first reported on March 4th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Wepted	2026-05-08 02:24:31 (2 months ago)	Port scan detected by honeypot	Port Scan Hacking
🇻🇪 LUISE	2026-05-08 02:00:12 (2 months ago)	Vulnerability scanning for Web files on server 5-9VE.	Hacking Bad Web Bot
🇳🇿 Antinson	2026-05-08 00:33:05 (2 months ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇳🇱 Savvii	2026-05-08 00:06:30 (2 months ago)	20 attempts against mh_ha-misbehave-ban on star	Brute-Force Bad Web Bot Web App Attack
🇫🇷 solution.it	2026-05-07 23:53:09 (2 months ago)	[Fri May 08 01:53:08.766205 2026] [authz_core:error] [pid 1731039:tid 1731039] [client 161.35.3.74:6 ... show more [Fri May 08 01:53:08.766205 2026] [authz_core:error] [pid 1731039:tid 1731039] [client 161.35.3.74:60858] AH01630: client denied by server configuration: /var/www/html/blog.solution.it/.htpasswd show less	Brute-Force
Anonymous	2026-05-07 21:36:07 (2 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇺🇸 TPI-Abuse	2026-05-07 21:08:37 (2 months ago)	(mod_security) mod_security (id:210492) triggered by 161.35.3.74 (-): 1 in the last 300 secs; Ports: ... show more (mod_security) mod_security (id:210492) triggered by 161.35.3.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 17:08:31.098313 2026] [security2:error] [pid 24792:tid 24792] [client 161.35.3.74:41620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.48"] [uri "/wp-config.php.bak"] [unique_id "afz_Tx3Krt_sD2GlJDLZEQAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-05-07 16:25:26 (2 months ago)	20 attempts against mh-misbehave-ban on chard	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-05-07 16:02:59 (2 months ago)	56 attempts against mh-misbehave-ban on runners-01	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-07 04:04:58 (2 months ago)	161.35.3.74 - - [07/May/2026:13:04:57 +0900] "GET /.env HTTP/1.1" 403 440 "-" "Mozilla/5.0 (X11; Lin ... show more 161.35.3.74 - - [07/May/2026:13:04:57 +0900] "GET /.env HTTP/1.1" 403 440 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0 Safari/537.36" 161.35.3.74 - - [07/May/2026:13:04:57 +0900] "GET /sitemap.xml HTTP/1.1" 403 440 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0 Safari/537.36" 161.35.3.74 - - [07/May/2026:13:04:57 +0900] "GET /wp-config.php.bak HTTP/1.1" 403 440 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0 Safari/537.36" ... show less	Brute-Force
🇳🇱 Savvii	2026-05-07 03:45:28 (2 months ago)	20 attempts against mh-misbehave-ban on ship	Brute-Force Bad Web Bot Web App Attack
🇨🇿 lp	2026-04-13 03:18:47 (2 months ago)	SSH Brute force: 1 attempts were recorded from 161.35.3.74 2026-04-13T04:38:25+02:00 Connection clos ... show more SSH Brute force: 1 attempts were recorded from 161.35.3.74 2026-04-13T04:38:25+02:00 Connection closed by authenticating user root 161.35.3.74 port 51728 [preauth] show less	Brute-Force SSH
🇺🇸 cazae	2026-04-13 02:40:49 (2 months ago)	2026-04-12T22:40:36.158755-04:00 debian sshd[1043236]: pam_unix(sshd:auth): authentication failure; ... show more 2026-04-12T22:40:36.158755-04:00 debian sshd[1043236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.3.74 2026-04-12T22:40:38.323591-04:00 debian sshd[1043236]: Failed password for invalid user db from 161.35.3.74 port 59526 ssh2 2026-04-12T22:40:45.221192-04:00 debian sshd[1043238]: Invalid user git from 161.35.3.74 port 59536 2026-04-12T22:40:46.539166-04:00 debian sshd[1043238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.3.74 2026-04-12T22:40:48.408637-04:00 debian sshd[1043238]: Failed password for invalid user git from 161.35.3.74 port 59536 ssh2 ... show less	Brute-Force SSH
🇭🇰 bing	2026-04-13 02:40:44 (2 months ago)	2026-04-13T02:38:33.929219 ZT2083209408 sshd[3218433]: Failed password for root from 161.35.3.74 por ... show more 2026-04-13T02:38:33.929219 ZT2083209408 sshd[3218433]: Failed password for root from 161.35.3.74 port 60636 ssh2 2026-04-13T02:40:42.466177 ZT2083209408 sshd[3218699]: Invalid user db from 161.35.3.74 port 43900 ... show less	Brute-Force SSH
🇫🇷 largo-it.net	2026-04-13 02:40:44 (2 months ago)	Apr 13 04:38:24 vps-9f3cdc33 sshd[518563]: Failed password for root from 161.35.3.74 port 45276 ssh2 ... show more Apr 13 04:38:24 vps-9f3cdc33 sshd[518563]: Failed password for root from 161.35.3.74 port 45276 ssh2 Apr 13 04:40:35 vps-9f3cdc33 sshd[518669]: Invalid user db from 161.35.3.74 port 59046 Apr 13 04:40:35 vps-9f3cdc33 sshd[518669]: Failed password for invalid user db from 161.35.3.74 port 59046 ssh2 Apr 13 04:40:43 vps-9f3cdc33 sshd[518682]: Invalid user git from 161.35.3.74 port 59074 Apr 13 04:40:44 vps-9f3cdc33 sshd[518682]: Failed password for invalid user git from 161.35.3.74 port 59074 ssh2 ... show less	Brute-Force SSH Hacking

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 202.29.225.158

🇺🇸 193.19.109.237

🇮🇳 182.66.193.212

🇸🇬 157.245.204.205

🇸🇳 154.125.159.90

🇮🇩 152.32.154.44

🇨🇳 101.76.248.214

🇵🇱 94.26.88.19

🇱🇹 81.30.98.47

🇳🇱 45.148.10.152

🇷🇴 2.57.122.150

🇻🇳 165.154.105.128

🇺🇸 165.22.34.189

🇦🇺 103.208.219.38

🇸🇬 103.189.234.96

🇳🇱 91.92.40.13

🇫🇷 85.217.140.29

🇺🇸 23.98.142.189

🇺🇸 172.208.48.177

🇮🇪 98.71.8.129